Skip to content
OpenAdvisories
Medium WID-SEC-2026-3527 12 CVEs

Apache Tomcat: Mehrere Schwachstellen

Published Sep 22, 2026 · Updated Nov 9, 2026 · Revision 13 · de

Vendor: amazon Vendor: Apache Vendor: F5 Vendor: IBM Vendor: Red Hat Vendor: SUSE Product: BIG-IP Product: Enterprise Linux Product: Integration Bus Product: Linux Product: Linux 2 Product: openSUSE Product: QRadar SIEM Product: Tomcat Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Apache Tomcat ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Denial of Service Angriff durchzuführen und um Daten zu manipulieren.

Product

Apache Tomcat ist ein Web-Applikationsserver für verschiedene Plattformen.

Vulnerabilities 12

  • Critical 9.8
    CVE-2026-76183 Public exploit

    Apache Tomcat: Bypass of security constraints for WebSocket endpoints

    Authentication Bypass by Alternate Name vulnerability in Apache Tomcat allowed the security constraints for any WebSocket endpoint to be bypassed. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.0.M1 …

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu
  • Critical 9.8
    CVE-2026-86248

    Apache Tomcat: Fix for CVE-2026-34500 was incomplete. OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled

    CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M14 through 11.0.25, from 10.1.22 through 10.1.59, from 9.0.92 through 9.0.121. Us…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu
  • Critical 9.1
    CVE-2026-86350 Public exploit

    Apache Tomcat: Regression in fix for CVE-2026-41293 can trigger request header mix-up

    Inconsistent interpretation of HTTP/2 requests ('HTTP Request/Response smuggling') vulnerability in Apache Tomcat caused by a regression in fix for CVE-2026-41293 can trigger request header mix-up. This issue affects Apache Tomcat: from 11.0.22 through 11.0.2…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 8.1
    CVE-2026-77762

    Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled Request

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Apache Tomcat allows an attacker to inject trailer fields into another HTTP/2 request. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.2…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 7.5
    CVE-2026-77791

    Apache Tomcat: DoS via busy wait during WebSocket close

    Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack. This issue affects Apache Tomcat: from 11.0.0-M5 through 11.0.25, from 10.1.8 through 10.1.59, from 9.0.74 through 9.0.121. The fo…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 7.5
    CVE-2026-78383

    Apache Tomcat: AJP DoS via missing request body

    Allocation of resources without limits or throttling vulnerability in Apache Tomcat allows an unauthenticated AJP request to pin an AJP processing thread leading to denial of service. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 7.5
    CVE-2026-79677

    Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout

    Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes. This issue affects Apache Tomcat: from 11.0.0-M1 th…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 7.5
    CVE-2026-87022

    Apache Tomcat: WebSocket message smuggling with per-message-deflate

    Improper handling of length parameter inconsistency vulnerability in Apache Tomcat allows WebSocket message smuggling when per-message-deflate is used. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 through 10.1.59, from 9.0.…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 7.3
    CVE-2026-75973

    Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configured

    Improper Authentication vulnerability in Apache Tomcat. When Jakarta Authentication was configured with SimpleAuthConfigProvider as the default provider and multiple web application used that provider, the realm for the first web application to authenticate a…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • High 7.3
    CVE-2026-78437

    Apache Tomcat: HTTP/2 DoS via malformed request

    Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user to fail. This issue affects Apache Tomcat: from 11.0.19 through 11.0.25, from 10.1.53 through 10.1.59, from 9.0…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • Medium 6.5
    CVE-2026-73581

    Apache Tomcat: OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore

    Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.25, from 10.1.0-M1 throu…

    Apache Software Foundation Apache Tomcat tomcat8 tomcat9 Debian Ubuntu
  • Low 3.7
    CVE-2026-77756

    Apache Tomcat: Transfer-Encoding honored for HTTP/1.0 requests

    Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Apache Tomcat caused by processing the transfer-encoding header for an HTTP/1.0 request may allow an attacker to cause one request from another user to fail when…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat8 Debian Ubuntu

Revision history

  1. #13

    Neue Updates von Red Hat aufgenommen

  2. #12

    Neue Updates von IBM aufgenommen

  3. #11

    Neue Updates von Red Hat und IBM aufgenommen

  4. #10

    Neue Updates von SUSE aufgenommen

  5. #9

    Neue Updates von Amazon aufgenommen

  6. #8

    Neue Updates von Amazon aufgenommen

  7. #7

    Neue Updates aufgenommen

  8. #6

    Neue Updates von F5 aufgenommen

  9. #5

    Neue Updates von SUSE aufgenommen

  10. #4

    Neue Updates von SUSE aufgenommen

  11. #3

    Neue Updates von openSUSE aufgenommen

  12. #2

    Referenz(en) aufgenommen: EUVD-2026-85227, EUVD-2026-85226, EUVD-2026-85225, EUVD-2026-85224, EUVD-2026-85222, EUVD-2026-85236, EUVD-2026-85232, EUVD-2026-85231, EUVD-2026-85230, EUVD-2026-85229, EUVD-2026-85234, EUVD-2026-85235

  13. #1

    Initiale Fassung

References